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An emerging technology known as Physical unclonable function (PUF) can provide 
a hardware root-of-trust in building the trusted computing system. PUF exploits the 
intrinsic process variations during the integrated circuit (IC) fabrication to generate a 
unique response. This unique response differs from one PUF to the other similar type 
of PUFs. Static random-access memory PUF (SRAM-PUF) is one of the memory- 
based PUFs in which the response is generated during the memory power-up process. 
Non-volatile memory (NVM) architecture like SRAM is available in off-the-shelf mi- 
crocontroller devices. Exploiting the inherent SRAM as PUF could wide-spread the 
adoption of PUF. Therefore, in this study, we evaluate the suitability of inherent SRAM 
available in ATMega2560 microcontroller on Arduino platform as PUF that can pro- 
vide a unique fingerprint. First, we analyze the start-up values (SUVs) of memory 
cells and select only the cells that show random values after the power-up process. 
Subsequently, we statistically analyze the characteristic of fifteen SRAM-PUFs which 
include uniqueness, reliability, and uniformity. Based on our findings, the SUVs of 
fifteen on-chip SRAMs achieve 42.64% uniqueness, 97.28% reliability, and 69.16% 
uniformity. Therefore, we concluded that the available SRAM in off-the-shelf com- 
modity hardware has good quality to be used as PUF. 
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1. INTRODUCTION 


Physical unclonable function (PUF) is a promising technology as a hardware fingerprinting solution 
for a trusted computing system by providing a root-of-trust. PUF exploits the intrinsic manufacturing process 
variations during integrated circuit (IC) fabrication. The intrinsic process variations embodied in the silicon 
chip acts as a random function for a PUF which can uniquely map a set of challenges to a set of responses, 
known as challenge-response pairs (CRPs). These CRPs are random and show a device-specific property that 
can be applied in IC identification and authentication, and cryptographic key generation application [I]. 

Several PUFs have been proposed in the past [2], [B]. Static random-access memory PUF (SRAM- 
PUF) is one of the previously proposed PUFs and it is categorized as memory-based PUF [4], [5]. Further, 
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SRAM-PUF has been sub-categorized as Weak-PUF due to limitations in its CRPs. The terminology of 
‘Strong’ and ‘Weak’ PUF is not meant to indicate that one PUF is superior to the other PUFs, rather it is 
to indicate the corresponding CRPs number of one PUF able to generate [4], [6], [7]. Typical SRAM cells con- 
sist of a cross-coupled inverter and two access transistors. The cross-coupled inverter is very susceptible to the 
process variations, hence lead to the threshold voltage, V;, mismatches between n-channel metal-oxide semi- 
conductor (nMOS) and p-channel metal-oxide semiconductor (PMOS) transistors. Due to the V; mismatch, a 
racing condition to charge the loading capacitances of cross-coupled inverter occurs during the power-up pro- 
cess [8]. An inverter that has a strong pMOS (i.e., low V;;,) drives more current and turns the nMOS of another 
inverter to ON state. Eventually, the load capacitance corresponding to the strong pMOS being pulled-up to 
Vag and another load capacitance being pulled-down to OV. 

The phenomenon mentioned above causes each SRAM cell to settles at a random start-up value (SUV) 
either ‘1’ or ‘0’ during the power-up process. The SUVs across different memory blocks within an SRAM and 
across multiple SRAMs show device-specific and random patterns. Hence, it is suitable to be used as PUF as 
proposed earlier in [4], [5]. Nevertheless, the question remains is the suitability of on-chip or inherent SRAM 
in any computing device to be used as a PUF. Exploiting the on-chip SRAM as PUF can further reduce the total 
cost of building the hardware root-of-trust feature and could wide-spread the adoption of PUF in a computing 
system [9]. 

Motivated by the cost reduction and potential wide-spread adoption of PUF in computing systems, 
the focus of this paper is to analyze and evaluate the suitability of on-chip SRAM as PUF. We used the AT- 
Mega2560 microcontroller on the Arduino platform as a case study to evaluate the performance of SRAM-PUF. 
The main contributions of this work are highlighted below: 

i We study the SUVs of on-chip 8kB SRAM in ATMega2560 microcontroller device. We show that the 
SUVs in the memory address range of 0x0281 to Ox20D0 are random and suitable to be used as PUF. 

ii We evaluate the quality of PUF which includes uniqueness, reliability, and uniformity on fifteen on-chip 
8kB SRAMs by randomly selecting 4096 bits from the aforementioned memory address range for each 
SRAM. The on-chip SRAM shows good quality and sufficient entropy of PUF which achieve 42.64%, 
97.28%, and 69.16%, respectively for uniqueness, reliability, and uniformity. 

The rest of the paper is organized as follows. Section 2 describes the background which related to this 
work. Section 3 describes the methods used in this study. The experimental analysis and results are presented 
in section 4. Finally, conclusions are drawn in section 5. 


2. RELATED WORK 

A dual function of SRAM as memory and PUF has been suggested in the previous studies [10J- 
[12]. Hoffmann et al., [11], were focused on reusing the on-chip cache as PUF, while Mispan et al., 
proposed the ageing mitigation technique (i.e., to improve the reliability of SUVs) experiences by the SRAM 
cells when it is being used as memory and PUF. Other studies have been focusing on using on-chip SRAM 
as PUF in ARM-based low-end commodity microcontroller devices [13], [14]. These studies show that the 
inherent SRAM in ARM-based microcontroller contains sufficient entropy to be exploited as PUF. In other 
studies, Platonov et al., and Aung et al., investigate the entropy of SUVs in an on-chip memory in 
ATMegal284P and ATMega328P microcontrollers, respectively. The results from both studies show that the 
SUVs have a good entropy that can uniquely distinguish each chip. Elsewhere, microcontrollers in Arduino 
platforms have been used for a proof-of-concept of internet-of-things (IoT) device authentication [17]-[19]. 
Besides, the on-chip SRAM in ATMega328P microcontroller devices have been used as a case study to perform 
invasive attacks as discussed in [20], [21]. All of the above studies show that the feasibility of using on-chip 
SRAM in ATMega256 microcontroller on Arduino platform as PUF has never been studied. In our study, we 
focus on evaluating the PUF entropy of on-chip 8 kB SRAM in an ATMega256 microcontroller device and we 
specify which memory address can be used to generate a unique identifier. 


3. METHODOLOGY 

The available on-chip memory of 8 kB SRAM in ATMega2560 microcontroller on the Arduino plat- 
form is used in this study. The on-chip SRAM in ATMega2560 is divided into 4 allocations of memories which 
are the Register File, the I/O memory, Extended I/O memory, and the internal data SRAM [22]. Each address 
is used to store a byte (i.e., 8-bit) of data. The first 32 locations address the register file, the next 64 locations 
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the standard I/O memory, then 416 locations of extended I/O memory, and the next 8,192 locations address 
the internal data SRAM. All memory location addresses are analyzed in searching for unique and random pat- 
terns of SUVs during the power-up process. To read the SUVs of SRAM-cells, we modified the start-up code 
(i.e., setup( function) to display the raw SUVs via universal asynchronous receiver-transmitter (UART) (..e., 
Arduino on-board USB-to-Serial) before the SRAM gets initialized. The start-up code is essential to every 
microcontroller as it initializes variables, pin modes, and libraries. To measure the reliability of SUVs under 
different power-up cycles, five power-up processes have been conducted on each of fifteen devices with a time 
interval of 5 minutes before the next power-up process takes place to eliminate the effect of data remanence 
in SRAM cells [23]. It is assumed that the supply voltage and surrounding temperature remain constant dur- 
ing the power-up experiment. All SUVs extracted from the on-chip SRAM are recorded in a CSV file and 
MATLAB R2016b is used as a post-processing software to evaluate the uniqueness, reliability, and uniformity 
performances. 


4. SIMULATION RESULTS AND ANALYSIS 

In this section, the relevant simulation and analysis are discussed based on the described methodology 
in section 3. First, the randomness of the SUVs in the ATMEGA2560’s SRAM is analyzed. Subsequently, the 
quality of SRAM-PUF such as uniqueness, reliability, and uniformity is evaluated according to the mathemati- 
cal formulation described in [24], [25]. 


4.1. Analysis of the ATMEGA2560’s SRAM 

We evaluated the SUVs patterns of ATMega2560 microcontroller device on Arduino platform that 
integrates an on-chip 8 kB (i.e., range of address: 0x0000 to 0x21 FF) of SRAM. The randomness of SUVs of 
SRAM cells is assessed using fifteen ATMega2560 devices by extracting the SUVs in each memory location. 
Figure [I] illustrates the bitmap of SUVs measurement of all the addresses in an 8 kB on-chip SRAM in the 
ATMega2560 microcontroller. The bitmap has been illustrated such that each row consists of 16-byte of data 
(i.e., 128-bit). As can be seen in Figure}1| the bitmap indicates that there are repeating patterns in the low 
address (0x0000 to 0x027F) and high address (0x20D0 to 0x21FF) regions for all fifteen devices. 
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Figure 1. Bitmap of SUVs measurement of an ATMEGA2560 on-chip 8 kB SRAM 
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As mentioned in section 3 the first 512 locations addressed the register file, the standard I/O memory, 
and the Extended I/O memory. Therefore, we assume that the observed repeating patterns represent structures 
used by the on-board ROM code embedded with every Arduino board. Another observation of repeating 
patterns is at the high address region which corresponding to the address of internal data SRAM that could be 
caused by the application programming interface (API). The most important observation is the SUVs generated 
by the SRAM cells within the address region of 0x0280 to 0x20CF which shows randomness and uniqueness 
characteristics. Hence, the subsequent analysis of PUF quality is based on the SUVs extracted from this address 
region. 


4.2. Uniqueness 

Uniqueness measures the ability of a PUF to generate a response that differ from the other responses 
generated by the other similar types of PUFs when a challenge C is applied. Ideally, the uniqueness should 
be distributed around 50% with a very small standard deviation. Uniqueness can be evaluated using hamming 
distance (HD) as defined in (i): 


m—-1l m 
mase 5 AD R 99% (1) 
m(m — 1) Z j=i+1 ‘e 


where 2 and 7 represent two PUF instances under evaluation that generates n-bit of response. m represents the 
total number of similar types of PUFs. 

Based on the findings of random SUVs patterns as discussed in section 4.1, only 4096-bit is selected 
randomly within the address region of 0x0280 to Ox20CF for each device. Figure 2|depicts the uniqueness for 
fifteen SRAM-PUF instances with a 4096-bit of response is extracted for each SRAM-PUEF. The uniqueness of 
0.4264 (42.64%) with a standard deviation of 0.0102 is obtained. The uniqueness and its standard deviation 
are closed to an ideal value of 50% with a very small standard deviation. 
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Figure 2. Uniqueness of fifteen SRAM PUF instances 
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4.3. Reliability 

Reliability is a measure of reproducibility of the PUF response. Ideally, a 100% reliability is desired 
for PUF circuits. However, because of the noise experienced by the PUF circuit, it is not possible to achieve 
100% reliability. The SUVs for reliability evaluation have been extracted according to the methodology de- 
scribed in section 3. Subsequently, the reliability is computed using 2), defined as: 


Reliability = | 1 


x 100% (2) 


1 HD(Ri(n), Bi, ;(n)) 
5 , 


ms 
j=1 


n 


where i represents PUF under evaluation which generate n-bit response, R; (n) at reference power-up, R; ;(n) 
is the response at different condition (i.e., next power-up process ), and m represents the total number of power- 
up processes. The SUVs which was generated for uniqueness evaluation in Section[4.2] is set as a response at 
the reference power-up. 

Figure B]depicts the reliability for each of the SRAM-PUFs that has been subjected to five power-up 
processes. Based on the reliability evaluation, one device shows reliability of 93.29%, lower as compared to 
the reliability of the other fourteen devices. Despite an outlier, it can be observed that the SRAM-PUFs achieve 
high reliability under different power-up processes, on average of about 97.28%, close to an ideal value of 
100%. 
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Figure 3. Reliability of fifteen SRAM-PUFs subjected to five power-up processes 


4.4. Uniformity 

Uniformity measures the number of 1’s and 0’s distribution in a binary response of a PUF. A bal- 
anced distribution of 1’s and 0’s is required which indicates the randomness in a response. Uniformity can be 
evaluated using hamming weight (HW) as defined in B}: 


1 m n 
Uniformity = aa 5> >D ri j xX 100% (3) 
i=1 j=1 


where r; j is the j-th binary bit of an n-bit response from a PUF 4, for a total of m PUFs. Figure [4|depicts the 
uniformity distribution of fifteen SRAM-PUFs with 4096-bit extracted from each PUF. The SUVs extracted 
from fifteen SRAM-PUFs achieve 0.6916 (69.16%) of uniformity with a standard deviation of 0.0182. 

The SUVs are skewed towards one, therefore the uniformity value is more than 50% as can be seen in 
Figure/4|which indicates more 1’s than 0’s in the PUF responses. A similar observation of a strong bias towards 
one in another ATMega family is described in [26]. Despite this observation, the uniqueness which has been 
evaluated earlier in Section|4.2.]is closed to an ideal value of 50% (1.e., able to distinguish a PUF from a group 


Lightweight hardware fingerprinting solution using inherent memory ... (Mohd Syafiq Mispan) 


110 o ISSN: 2502-4752 


of similar PUFs). Hence, on-chip SRAM in the ATMega2560 microcontroller still holds a good quality to be a 
PUF. 
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Figure 4. Uniformity of fifteen SRAM PUF instances 


5. CONCLUSION 


SRAM-PUF is one of the previously proposed memory-based PUFs. SRAM memory is available in 
any computing system, hence it is interesting to investigate the suitability of using on-chip memory in off-the- 
shelf commodity devices. In this study, the on-chip memory of 8kB SRAM in ATMega2560 microcontroller 
on the Arduino platform has been used as a case study. Our findings show that the uniqueness is distributed 
close to an ideal value of 50% with a small standard deviation. The average reliability of fifteen SRAM-PUFs 
under five different power-up cycles is approximately about 97.28%. The uniformity of SUVs extracted from 
fifteen SRAM-PUFs shows biasing towards one whereby the uniformity is distributed around 69.16%. Despite 
the skewed uniformity, on-chip SRAM in the ATMega2560 microcontroller still showing good uniqueness and 
reliability. Hence, it can be concluded that the on-chip SRAM in the ATMega2560 microcontroller on the 
Arduino platform is suitable to be used as a hardware root-of-trust solution known as PUF. 
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